Meta Muse leaks personal and business secrets via public share links

Researchers at Claroc found 6,800 publicly discoverable Muse conversation links through passive DNS. Because conversation titles appear in the URL, the links are easy to find and expose loan applications, revenue reviews and staff calendars.

• Claroc enumerated 6,800 Muse share links via passive DNS on cf.metaaiusercontent.com
• Conversation titles embedded in URLs make the links searchable
• Exposed data included a loan application, revenue review and vacation calendar
• Meta did not respond to Claroc; Muse previously had a zero-day flaw